阅读:1789回复:0
创建系统进程总返回STATUS_PROCESS_IS_TERMINATING是怎么回事?我在MiniFilter的PostCreate和PreCleanup中用PsCreateSystemThread创建系统线程,用来终止非授权进程。 开始代码运行良好,运行一段时间后,PsCreateSystemThread就一直返回 c000010a,即STATUS_PROCESS_IS_TERMINATING,再也不能创建系统进程了,请问这是什么原因呢? 返回值定义如下: // MessageId: STATUS_PROCESS_IS_TERMINATING // // MessageText: // // An attempt was made to duplicate an object handle into or out of an exiting process. // #define STATUS_PROCESS_IS_TERMINATING ((NTSTATUS)0xC000010AL) |
|